To be fair, I don't know or claim that Bank of America is doing any of this, just that they could. And even if they did, that wouldn't make SiteKeys foolproof,

To be fair, I don't know or claim that Bank of America is doing any of this, just that they could. And even if they did, that wouldn't make SiteKeys foolproof, but nothing really is completely foolproof, all you can do is is be more or less foolproof.